$ rpki-client -vvf rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft File: 8R8km4Id_MKxuXr05wUm3ZM6En0.mft (raw, json) Hash identifier: CUmkfeE3nU6PZiWq6Vmj8PaUTDvuVrFLd0Q0qLzjTLQ= Subject key identifier: 6F:86:AF:A9:64:3D:C7:A8:E8:7A:A2:85:73:E0:1F:41:CE:1B:06:81 Authority key identifier: F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D Certificate issuer: /CN=A911FF25/serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D Certificate serial: 0151 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft Manifest number: 014A Signing time: Wed 11 Jun 2025 03:42:22 +0000 Manifest this update: Wed 11 Jun 2025 03:42:22 +0000 Manifest next update: Wed 18 Jun 2025 03:42:22 +0000 Files and hashes: 1: 8R8km4Id_MKxuXr05wUm3ZM6En0.crl (hash: ey+5KhBNHBLhIb8fWkzIJHyscMqldbj7JaafVLXk3KY=) 2: CE74C490AA4911EF80B4D381C4F9AE02.roa (hash: 9trSPATG6e6kZcNLx6FEo2PvgXLIh+akuZgMM6SjcBw=) 3: 3D870D1C685F11EEA29D9F4BC4F9AE02.roa (hash: XwxYtSorve+SAC3u+XigKdLjB1a8nt+xDntpvYaL7J8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 03:42:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 337 (0x151) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FF25, serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D Validity Not Before: Jun 11 03:42:22 2025 GMT Not After : Jun 18 03:42:22 2025 GMT Subject: CN=6848fb1e-2d1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ab:98:26:dc:03:cb:9f:68:e8:6d:29:5a:1c: 7b:65:9e:67:85:17:d6:a0:4b:1d:19:54:5d:7e:b5: d1:57:6b:f6:0e:b1:2d:de:b6:b1:e0:2b:a9:62:b9: e8:68:37:28:c3:10:89:2c:8b:75:33:da:11:05:25: 26:4e:3c:fe:df:23:c4:82:28:22:1e:ff:e6:a4:4e: 97:12:27:5a:f2:0b:14:dd:98:f2:08:94:aa:43:19: 51:4c:0d:d1:93:7d:eb:d8:85:35:c8:38:02:01:54: 85:50:e1:fa:2b:db:ea:14:94:1a:56:ba:f4:b7:9c: 6e:a2:2d:22:60:5c:4f:1e:69:13:27:60:fb:7f:26: 89:61:a0:85:c3:1a:9c:0b:c6:e3:36:48:7b:df:c7: 7a:98:fd:25:24:80:51:bc:ad:b6:7e:73:47:d8:3c: d2:2e:a2:2d:ae:d6:f4:f8:a4:62:b4:df:69:cc:c1: f8:a4:d3:9d:3e:63:70:3c:4f:13:42:a9:41:3f:43: f5:d9:12:43:a5:a6:6c:e5:c0:af:fb:bd:4b:3f:12: 0a:0e:57:e0:37:bc:ff:5c:c4:dc:b0:e5:8c:a1:53: f5:9f:ea:f6:53:35:7a:d9:82:26:d6:6c:95:c2:41: 42:54:db:d2:90:0c:56:50:08:76:90:f7:e3:1d:a6: 61:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:86:AF:A9:64:3D:C7:A8:E8:7A:A2:85:73:E0:1F:41:CE:1B:06:81 X509v3 Authority Key Identifier: keyid:F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:b7:4b:ce:42:af:7e:52:b3:00:1e:af:3a:39:18:e0:74:d8: 34:5b:69:72:ab:3f:f6:81:92:41:73:b6:6f:3a:3c:22:a1:49: 48:0d:96:d0:cd:5f:40:5d:be:98:2e:b2:fd:91:24:f2:26:49: d0:4a:cd:e5:d9:a8:e7:09:cf:ff:a1:49:1c:0b:a8:c6:fd:ec: 11:ac:ef:a0:ad:26:0b:59:cf:98:e1:c9:b8:43:79:4d:1a:45: b4:9a:e6:7c:d4:3f:38:97:bb:e3:72:31:84:75:f8:89:2f:96: 74:00:a7:d1:46:b5:7c:c0:50:02:53:0b:01:f2:2d:73:da:aa: 75:ce:5b:2b:b6:89:c1:92:f8:75:1b:50:cb:6c:65:f4:d6:6b: a4:86:71:20:1d:73:ad:db:bd:3b:08:a0:4a:35:0e:48:32:2f: cb:dd:80:ac:ad:09:99:af:cb:00:b1:ad:08:4d:57:83:b4:cd: 4d:f1:6d:45:06:58:c1:ba:f3:ee:aa:c4:4c:3f:78:8e:0a:aa: b8:38:c1:ec:79:ae:4b:42:10:7f:65:d2:1c:21:5b:80:06:6a: 88:71:b9:2e:65:55:77:c9:1f:fb:98:42:a9:3f:ff:f5:6e:81: 7b:54:33:c1:04:e2:54:3b:68:bf:4b:ab:8f:a2:01:51:95:f3: 21:59:f0:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZGMjUxMTAvBgNVBAUTKEYxMUYyNDlCODIxREZDQzJCMUI5N0FGNEU3MDUyNkRE OTMzQTEyN0QwHhcNMjUwNjExMDM0MjIyWhcNMjUwNjE4MDM0MjIyWjAYMRYwFAYD VQQDEw02ODQ4ZmIxZS0yZDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2quYJtwDy59o6G0pWhx7ZZ5nhRfWoEsdGVRdfrXRV2v2DrEt3rax4CupYrno aDcowxCJLIt1M9oRBSUmTjz+3yPEgigiHv/mpE6XEida8gsU3ZjyCJSqQxlRTA3R k33r2IU1yDgCAVSFUOH6K9vqFJQaVrr0t5xuoi0iYFxPHmkTJ2D7fyaJYaCFwxqc C8bjNkh738d6mP0lJIBRvK22fnNH2DzSLqItrtb0+KRitN9pzMH4pNOdPmNwPE8T QqlBP0P12RJDpaZs5cCv+71LPxIKDlfgN7z/XMTcsOWMoVP1n+r2UzV62YIm1myV wkFCVNvSkAxWUAh2kPfjHaZhdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG+Gr6lk Pceo6HqihXPgH0HOGwaBMB8GA1UdIwQYMBaAFPEfJJuCHfzCsbl69OcFJt2TOhJ9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkYyNS82MDY0QkFCMjUy RjQxMUVFODk4QjlCNDNDNEY5QUUwMi84UjhrbTRJZF9NS3h1WHIwNXdVbTNaTTZF bjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhSOGttNElkX01LeHVYcjA1d1VtM1pNNkVuMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkYyNS82MDY0QkFCMjUyRjQxMUVFODk4QjlCNDNDNEY5QUUwMi84UjhrbTRJZF9N S3h1WHIwNXdVbTNaTTZFbjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBt0vOQq9+UrMAHq86ORjgdNg0W2lyqz/2gZJBc7ZvOjwioUlIDZbQ zV9AXb6YLrL9kSTyJknQSs3l2ajnCc//oUkcC6jG/ewRrO+grSYLWc+Y4cm4Q3lN GkW0muZ81D84l7vjcjGEdfiJL5Z0AKfRRrV8wFACUwsB8i1z2qp1zlsrtonBkvh1 G1DLbGX01mukhnEgHXOt2707CKBKNQ5IMi/L3YCsrQmZr8sAsa0ITVeDtM1N8W1F BljBuvPuqsRMP3iOCqq4OMHsea5LQhB/ZdIcIVuABmqIcbkuZVV3yR/7mEKpP//1 boF7VDPBBOJUO2i/S6uPogFRlfMhWfAk -----END CERTIFICATE-----Generated at Thu Jun 12 14:46:16 2025 by rpki-client